Data
Detection and Response

DDR integrates and enhances various tools to provide superior data security against internal vulnerabilities and widespread disclosure across the entire business ecosystem, outperforming standalone solutions.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Why DDR is needed？

Increasing Demand for
Data Security
Management

Lack of Standardization
in Endpoint Network
Access

Difficulty in Controlling
Risky Endpoints in
Enterprises

Urgent Need for Unified
Endpoint Security
Management

Product Introduction

DATA Reveal lineage

Combine content analysis and data lineage, tracking data movement beyond traditional file storage.

DETECTION Reduce false positives

Leverage behavior and data insights to enhance the precision of identifying threats from within the organization.

RESPONSE On the device

Secure data on the device to prevent access by unauthorized applications, bypassing network-level controls.

Key Features

Data Asset Management

Data Discovery involves identifying and cataloging all company data assets, like taking inventory of your valuables. DDR simplifies this with a fast network scan to uncover all data points.

Classification organizes data by assigning specific labels, similar to categorizing valuables for easy identification and protection.

Assets Map is a "data treasure map." After discovering and labeling data, DDR shows its location and keeps the map updated, enabling managers to safeguard data and make quick decisions.

Data Flow Tracking

Sensitive Data Monitoring: Identifies and tracks sensitive data on endpoints.

File Analysis: Analyzes files by format, encoding, and fingerprinting.

Policy Enforcement: Controls data misuse and transmission.

Outgoing Data Monitoring: Monitors channels like USB, IM apps, browsers, and LAN.

Full Data Flow Tracking: Tracks data flow, even when altered (renamed, copied, compressed, etc.).

Data Flow Tracking

Sensitive Data Monitoring: Identifies and tracks sensitive data on endpoints.

File Analysis: Analyzes files by format, encoding, and fingerprinting.

Policy Enforcement: Controls data misuse and transmission.

Outgoing Data Monitoring: Monitors channels like USB, IM apps, browsers, and LAN.

Full Data Flow Tracking: Tracks data flow, even when altered (renamed, copied, compressed, etc.).

Device Identity Matching

From an enterprise perspective, managing devices is not enough. Administrators prefer managing personnel, policies, and events via departments or user groups.

DDR automatically syncs and associates employee and device data without manual input. Administrators can also monitor and control risks for employees with abnormal behavior or those leaving, strengthening data security.

Risk Detection and UEBA

Data Analysis: DDR collects and analyzes endpoint data to identify risks and label sensitive information.

Leak and Risk Identification: Detects potential data leaks and risky users/devices using data modeling.

Dynamic Security Measures: Implements automatic blocking of high-risk data transfers and adjusts access controls based on risk levels, with customizable alerts and approvals.

Risk Detection and UEBA

Data Analysis: DDR collects and analyzes endpoint data to identify risks and label sensitive information.

Leak and Risk Identification: Detects potential data leaks and risky users/devices using data modeling.

Dynamic Security Measures: Implements automatic blocking of high-risk data transfers and adjusts access controls based on risk levels, with customizable alerts and approvals.